Virginia Tech® home

Phishing Education Program empowers employees to identify and stop attacks

Screenshot of cybersecurity training modules showing quiz questions about handling a found USB drive and evaluating suspicious access requests, alongside a message thanking the user for reporting a phishing attempt.
Clips from the Phishing Education Program interface.

The launch of the Phishing Education Program in spring 2025 marked a significant step toward strengthening Virginia Tech’s cybersecurity defenses. This proactive initiative offers departments the opportunity to assess their vulnerability to phishing threats through realistic simulations that mirror actual attack scenarios. 

Screenshot of cybersecurity training modules showing quiz questions about handling a found USB drive and evaluating suspicious access requests, alongside a message thanking the user for reporting a phishing attempt.
Clips from the Phishing Education Program interface.

The program identifies areas where awareness may be lacking, allowing for targeted education and support. Participants identified as needing additional training are provided timely, relevant training that helps them better recognize and respond to phishing attempts. Departments can choose to opt in or out at any time, ensuring flexibility while encouraging widespread participation. To foster transparency and continuous improvement, the program provides a monthly anonymized aggregate report, enabling departments to track progress and refine internal practices.

By turning education into action, this program enhances our collective ability to manage digital risks and protect sensitive data — demonstrating our ongoing commitment to a more secure organizational environment.